Riskigy

D-Link warns of multiple zero-days in DGS-3130 Series switches. D-Link shared mitigation measures for multiple unpatched security flaws affecting DGS-3130 series managed Gigabit stackable switches. bleepingcomputer.com/news/se…

QNAP says hackers breaching NAS devices in Plex2Shell attacks. QNAP urges users to update Plex Media Server to the latest version available in the QNAP App Center, as hackers are exploiting the Plex2Shell vulnerability chain. bleepingcomputer.com/news/se…

Fake Gift Card Scams Exploiting Trusted Brands. Fraudulent reward portals and fake gift card giveaways are surging globally, tricking users into deceptive verification loops and paid subscriptions. bleepingcomputer.com/news/se…

CISA Flags SonicWall SonicOS MFA Bypass Flaw Amid Reports of Possible Exploitation. The vulnerability, tracked as CVE-2026-19868 (CVSS score: 7.1 / 7.5), has been described as an authentication reinforcement vulnerability. thehackernews.com/2026/11/ci…

DigiCert data breach. DigiCert warns it suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents. bleepingcomputer.com/news/se…

SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks. SonicWall has released security updates to fix seven vulnerabilities in SonicOS firewalls, including an SSL-VPN authentication bypass flaw exploited in attacks. bleepingcomputer.com/news/se…

Apple released security updates to fix a zero-day vulnerability exploited in "extremely sophisticated" targeted attacks on iOS devices. It is strongly advised to install these security updates promptly to prevent potential ongoing attacks. bleepingcomputer.com/news/se…

TeamViewer urges users to patch severe flaws “as soon as possible”. Remote access software company TeamViewer warned customers on Tuesday to immediately patch a set of high-severity vulnerabilities affecting its client and host software. bleepingcomputer.com/news/se…

Fake Software Installers Disable Windows Update and Weaken Microsoft Defender. The campaign has targeted users looking to download popular software and has resulted in compromises across multiple organizations and industries. thehackernews.com/2026/09/fa…

SonicWall warned customers that threat actors are chaining two new SMA1000 zero-day vulnerabilities in remote code execution attacks. The two security flaws affect SMA1000 6210, 7210, and 8200v models, but they don't affect SSL-VPN running on SonicWalls. bleepingcomputer.com/news/se…

PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovered multiple ways to bypass the initial fixes. bleepingcomputer.com/news/se…

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access. CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server. thehackernews.com/2026/08/at…

Threat actors are exploiting a recently patched macOS vulnerability to gain root access and deploy cryptominers. The exploited bug is a high-severity authentication issue in Screen Sharing that allows remote attackers to log in without valid credentials. securityweek.com/recent-maco…

RingCentral data breach exposed info of 1.6 million accounts. The ShinyHunters extortion group stole personal information from RingCentral accounts after hacking the company in July, according to the data breach notification service Have I Been Pwned. bleepingcomputer.com/news/se…

Microsoft and Apple Release Fresh Security Updates. Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass. Three of the issues have a maximum severity rating of 10/10. securityweek.com/microsoft-a…

TP-Link has patched 15 vulnerabilities in the zero-touch provisioning (ZTP) mechanism of its Omada network devices that could be chained with previously disclosed flaws to achieve remote code execution (RCE). bleepingcomputer.com/news/se…

N-able warns of N-central auth bypass flaw exploited in attacks. N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. bleepingcomputer.com/news/se…

Health-ISAC, a cybersecurity information-sharing organization for the health sector, is warning healthcare and medical technology organizations of an observed increase in successful attacks by ShinyHunters. bleepingcomputer.com/news/se…

Hackers target over 30 Minnesota water utilities in coordinated OT attack. The attacks occurred on Sunday and Monday, July 26 and 27, and targeted operational technology (OT) systems at local water utilities. bleepingcomputer.com/news/se…

Hackers are changing the DNS settings on Wi-Fi devices at hotels and conference centers to redirect users to fake Microsoft 365 login pages to access sensitive business information, communications, and private documents. bleepingcomputer.com/news/se…